Analysis
-
max time kernel
78s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
04/03/2023, 22:57
General
-
Target
tmp.exe
-
Size
2.8MB
-
MD5
90b277eca0d8eaa0da1dba41f875ce78
-
SHA1
513a67fadbc6b1bf6559317787a35dae63ec6fe8
-
SHA256
987a652c39117a75b0b76539598a445a5c4a12be484915b80cc6704c2ee574a2
-
SHA512
dd01178eeea93347933a77ed808c91f6838b5a78c56c0cae7193a62778d514d86d1300c702c1c08200c6c4d6b599aa1ef1c6df2d202e04e1e48d9165a02b681b
-
SSDEEP
49152:u36HZxdKizxlMf6A2neNl+s8KuqGaX0ToIBAUZLYVWwsMnfY:15xdKiDM32eNOJBAUZLHwsMnfY
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp.exe"C:\Users\Admin\AppData\Local\Temp\tmp.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
4KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB